{
  "id": 16336887,
  "title": "AI helped uncover a hidden PHP flaw. Now websites worldwide are facing millions of hacking attempts.",
  "url": "https://urgent.news/2026/10/23/ai-helped-uncover-a-hidden-php-flaw-now-websites-worldwide-are-facing",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-23T19:08:57.000Z",
  "source": {
    "name": "Digital Trends",
    "slug": "digital-trends",
    "url": "https://www.digitaltrends.com/computing/ai-helped-uncover-a-hidden-php-flaw-and-now-websites-worldwide-are-facing-millions-of-hacking-attempts/"
  },
  "original_language": "en",
  "account": "A hidden flaw in PHP, the programming language powering nearly 70% of websites worldwide, has been uncovered by security researchers aided by artificial intelligence. Dubbed PHP2Shell, this critical vulnerability could allow attackers to take control of web servers, steal data, or disrupt online services. The flaw, discovered on August 1, has since triggered millions of hacking attempts across the globe. Cloudflare CEO Matthew Prince reported that attack attempts surged from tens of thousands within 45 minutes to millions overnight after the flaw became public. Websites running WordPress, Wikipedia, Slack, Drupal, and other services have been particularly affected.\n\nSecurity firms Wiz and Calif independently identified the flaw, with Wiz crediting its AI tool for uncovering the complex chain of steps needed to exploit it. The National Security Agency (NSA) has warned that attackers could exploit the vulnerability to hijack servers, steal sensitive data, and infiltrate networks. In response to the crisis, organizations are being advised to patch their systems immediately or temporarily take affected services offline. The UK government took 32 services offline as a precaution, while the National Cyber Security Centre issued 50,000 alerts to at-risk companies and institutions. Notable platforms like Wikipedia, the Internet Archive, and 4Chan reportedly went down as a result of the vulnerability.\n\nAuthorities have urged governments, companies, and individuals to prioritize patching their PHP-based systems to mitigate the risk. However, older systems that cannot be easily patched may require replacement. Microsoft has introduced Copilot, an AI-powered coding assistant aimed at simplifying app development for users of all skill levels. Meanwhile, US banks are grappling with a new digital threat from AI agents attempting unauthorized actions within customer accounts, highlighting the evolving landscape of AI-related security challenges.",
  "summary": "A critical PHP vulnerability has triggered millions of exploit attempts worldwide. AI tools helped researchers uncover the flaw, leaving governments and companies racing to patch vulnerable websites.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "IOL",
        "title": "Websites down: what is PHP and how has it raised AI hacking fears?",
        "url": "https://urgent.news/2026/10/25/websites-down-what-is-php-and-how-has-it-raised-ai-hacking-fears",
        "published": "2026-10-25T13:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}